This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/9c04d5-459b-4fe2-8450-e11ab261ca7b/1/TweIqtIqxDcNUYy3-53-cktB-Vc.mft File: TweIqtIqxDcNUYy3-53-cktB-Vc.mft (raw, json) Hash identifier: VvhJAIq0g9UfnTl6weH0g4c9eLLM/RsxOazOF+CCWIQ= Subject key identifier: AC:17:B7:C9:4E:75:FE:21:70:4F:7C:06:61:E0:E4:C0:DE:5D:B9:03 Authority key identifier: 4F:07:88:AA:D2:2A:C4:37:0D:51:8C:B7:FB:9D:FE:72:4B:41:F9:57 Certificate issuer: /CN=4f0788aad22ac4370d518cb7fb9dfe724b41f957 Certificate serial: 019AF1D1D35C328A21355FB3A8AA5D02E062 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TweIqtIqxDcNUYy3-53-cktB-Vc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/9c04d5-459b-4fe2-8450-e11ab261ca7b/1/TweIqtIqxDcNUYy3-53-cktB-Vc.mft Manifest number: 1377 Signing time: Sat 06 Dec 2025 04:00:51 +0000 Manifest this update: Sat 06 Dec 2025 04:00:51 +0000 Manifest next update: Sun 07 Dec 2025 04:00:51 +0000 Files and hashes: 1: TweIqtIqxDcNUYy3-53-cktB-Vc.crl (hash: lCiJivxt3O138BxFFAxjUKx7h0XiO1YuVKIMXuiDD7A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/9c04d5-459b-4fe2-8450-e11ab261ca7b/1/TweIqtIqxDcNUYy3-53-cktB-Vc.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/9c04d5-459b-4fe2-8450-e11ab261ca7b/1/TweIqtIqxDcNUYy3-53-cktB-Vc.mft rsync://rpki.ripe.net/repository/DEFAULT/TweIqtIqxDcNUYy3-53-cktB-Vc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:d3:5c:32:8a:21:35:5f:b3:a8:aa:5d:02:e0:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f0788aad22ac4370d518cb7fb9dfe724b41f957 Validity Not Before: Dec 6 04:00:51 2025 GMT Not After : Dec 7 04:00:51 2025 GMT Subject: CN=ac17b7c94e75fe21704f7c0661e0e4c0de5db903 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:13:2d:a5:7e:bb:ca:20:53:39:a6:c2:6c:b8: 0c:c1:d9:20:b9:b1:98:d2:83:ec:88:d8:ac:e3:af: 71:aa:7e:a5:e9:f4:fe:f3:2c:91:02:bc:7c:2a:b8: 49:85:fe:e7:ca:e4:d6:bb:1e:f5:7f:cd:78:6c:26: 6a:26:3a:75:8f:f0:dc:27:de:fe:88:18:9a:e6:f0: 71:5d:61:bb:47:1f:bd:bd:89:1e:a8:d3:fd:73:f4: 17:d1:29:35:3a:e0:16:1b:83:8b:60:d2:d7:4f:d6: 73:c1:2b:01:67:b7:a4:b5:51:fa:c0:eb:8b:a0:52: ed:82:e0:7b:c8:a2:fd:5f:cb:36:72:2b:59:c9:3f: 04:ce:e5:7b:d4:be:2e:10:0f:d6:f8:98:80:03:1d: 22:67:bd:95:04:49:cc:ec:89:63:07:38:cc:88:df: e3:44:64:b8:d7:12:77:0d:aa:a1:87:90:6a:b1:b0: 73:98:94:cd:6f:56:c6:f4:47:31:7c:d0:11:23:e0: 69:5d:29:94:e4:b6:7a:9a:b7:4d:43:74:7c:07:a3: e4:d3:ba:ae:73:d5:13:a9:77:b9:c2:e5:35:fd:50: df:83:af:c5:3a:01:92:29:ca:21:af:8d:a1:fb:52: 4c:22:6d:68:5b:1a:21:b4:6d:d3:98:d5:62:2d:ad: e6:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:17:B7:C9:4E:75:FE:21:70:4F:7C:06:61:E0:E4:C0:DE:5D:B9:03 X509v3 Authority Key Identifier: keyid:4F:07:88:AA:D2:2A:C4:37:0D:51:8C:B7:FB:9D:FE:72:4B:41:F9:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TweIqtIqxDcNUYy3-53-cktB-Vc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9c04d5-459b-4fe2-8450-e11ab261ca7b/1/TweIqtIqxDcNUYy3-53-cktB-Vc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9c04d5-459b-4fe2-8450-e11ab261ca7b/1/TweIqtIqxDcNUYy3-53-cktB-Vc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:6a:34:ad:9e:41:ef:7e:49:99:b0:5b:5d:41:cf:74:6e:a3: 40:13:ff:fc:cf:5d:f4:d8:60:4e:26:5b:6d:68:e6:2e:38:47: 9d:f4:93:d2:13:0c:b1:bf:db:82:e6:99:dc:7d:07:50:9b:85: 49:e5:ee:8e:71:2c:9e:cf:7e:fd:e1:e3:63:bb:2a:49:c7:59: 6a:49:8f:73:68:6d:8a:32:de:a3:11:d4:c6:c7:5c:20:f3:b5: da:16:c2:6d:ad:66:11:47:d2:20:c0:4f:0b:d1:0e:c8:ac:54: f0:e8:4a:ed:77:79:d4:2c:32:c2:0e:b6:c6:69:c6:53:52:73: 28:86:a6:c0:25:45:f6:07:4f:cd:77:4b:54:72:e4:d2:d3:61: 2a:14:da:3f:85:be:dc:9e:28:b7:e0:97:b7:e8:a7:a1:93:64: 68:14:8f:5c:f0:1e:10:a1:6e:b8:04:fa:31:6a:43:ec:96:c1: ea:d0:db:26:77:cc:03:0b:b8:60:bb:ea:6a:3b:39:77:13:8e: bc:3f:5c:6e:e0:38:32:f7:85:27:f3:40:c8:96:67:92:7f:c6: a9:44:7d:ca:e8:3a:d2:75:ec:17:ff:57:4a:31:a5:0e:70:ee: ea:22:95:04:16:29:2b:e4:4e:e9:06:84:f5:47:c3:df:dd:81: 1a:98:4a:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0dNcMoohNV+zqKpdAuBiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMDc4OGFhZDIyYWM0MzcwZDUxOGNiN2ZiOWRmZTcyNGI0 MWY5NTcwHhcNMjUxMjA2MDQwMDUxWhcNMjUxMjA3MDQwMDUxWjAzMTEwLwYDVQQD EyhhYzE3YjdjOTRlNzVmZTIxNzA0ZjdjMDY2MWUwZTRjMGRlNWRiOTAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRMtpX67yiBTOabCbLgMwdkgubGY 0oPsiNis469xqn6l6fT+8yyRArx8KrhJhf7nyuTWux71f814bCZqJjp1j/DcJ97+ iBia5vBxXWG7Rx+9vYkeqNP9c/QX0Sk1OuAWG4OLYNLXT9ZzwSsBZ7ektVH6wOuL oFLtguB7yKL9X8s2citZyT8EzuV71L4uEA/W+JiAAx0iZ72VBEnM7IljBzjMiN/j RGS41xJ3Daqhh5BqsbBzmJTNb1bG9EcxfNARI+BpXSmU5LZ6mrdNQ3R8B6Pk07qu c9UTqXe5wuU1/VDfg6/FOgGSKcohr42h+1JMIm1oWxohtG3TmNViLa3m5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKwXt8lOdf4hcE98BmHg5MDeXbkDMB8GA1UdIwQY MBaAFE8HiKrSKsQ3DVGMt/ud/nJLQflXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHdlSXF0SXF4RGNOVVl5My01My1ja3RCLVZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy85YzA0ZDUtNDU5Yi00ZmUyLTg0NTAt ZTExYWIyNjFjYTdiLzEvVHdlSXF0SXF4RGNOVVl5My01My1ja3RCLVZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy85YzA0ZDUtNDU5Yi00ZmUyLTg0NTAtZTExYWIyNjFjYTdi LzEvVHdlSXF0SXF4RGNOVVl5My01My1ja3RCLVZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjWo0rZ5B 735JmbBbXUHPdG6jQBP//M9d9NhgTiZbbWjmLjhHnfST0hMMsb/bguaZ3H0HUJuF SeXujnEsns9+/eHjY7sqScdZakmPc2htijLeoxHUxsdcIPO12hbCba1mEUfSIMBP C9EOyKxU8OhK7Xd51Cwywg62xmnGU1JzKIamwCVF9gdPzXdLVHLk0tNhKhTaP4W+ 3J4ot+CXt+inoZNkaBSPXPAeEKFuuAT6MWpD7JbB6tDbJnfMAwu4YLvqajs5dxOO vD9cbuA4MveFJ/NAyJZnkn/GqUR9yug60nXsF/9XSjGlDnDu6iKVBBYpK+RO6QaE 9UfD392BGphKxg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:03:15 2025 by rpki-client